219.40057X00 
P11631 

CLAIMS 

1 . A method of fault resilient booting in a multiprocessor system, 
comprising: 

designating one processor as a bootstrap processor; 
testing the bootstrap processor to verify that it will run BIOS code; 
setting a latch for disabling said bootstrap processor if the testing 
indicates a failure; 

testing during a power on self-test the operation of said bootstrap 

processor; 

testing during a built-in self-test the operation of said bootstrap 

processor; 

assigning the bootstrap process to another processor if said bootstrap 
processor fails a test; 

said testing steps being implemented in an appliance server 
management system. 

2. The method according to claim 1 , wherein said first testing step utilizes 
a timer which indicates a failure if it is not reset within the predetermined time period. 

3. The method according to claim 2, wherein a failure in the second or 
third testing step also causes said latch to be set. 
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4. The method according to claim 1 , wherein the testing steps are 
controlled by a control unit. 

5. The method according to claim 4, wherein the control unit includes the 
system I/O chip. 

6. An apparatus for fault resilient booting, comprising: 

a first processor designated as a bootstrap processor; 
a latch for turning off said bootstrap processor; 
a control unit for providing control signals for setting said latch, for 
resetting said latch and for controlling additional processors. 

7. The apparatus according to claim 6, further comprising a timer for 
determining if said bootstrap processor is operating properly. 

8. The apparatus according to claim 7, wherein said timer begins a time 
period wherein power is turned on and ends said time period after a predetermined 
time. 

9. The apparatus according to claim 8, wherein the bootstrap processor is 
considered to fail if said timer is not reset before reaching said predetermined time. 
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10. The apparatus according to claim 6, wherein said control unit includes 
a system I/O chip. 

1 1 . The apparatus according to claim 6, wherein the apparatus is part of an 
appliance server management system. 

1 2. A multiprocessor system for fault resilient booting, comprising: 

a plurality of processors with one processor being denominated a 
bootstrap processor; 

a control unit for generating a series of control signals; 
a timer; 

a latch for turning said bootstrap processor off; 

said timer providing a signal indicating that a predetermined time has 
expired, which is applied to said latch to set said latch; 

said control unit providing a first signal to said latch for setting said 
latch, a second signal applied to said latch for resetting said latch, a third signal for 
controlling other processors and a fourth signal for a resetting the timer. 

13. The system according to claim 12, wherein said first signal from said 
control unit is generated when said bootstrap processor fails a power-on self-test or 
a built-in self-test. 
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14. The system according to claim 12, wherein said timer tests whether 
said bootstrap processor can run BIOS code. 

1 5. The system according to claim 12, wherein the system is part of an 
appliance server management system. 

16. A system according to claim 1 1 , wherein said control unit causes 
another processor to become the bootstrap processor when said bootstrap processor 
is disabled by said latch. 


16 


